OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: ipchains in a single machine
From: Jean-Charles V. Compagnon (jccompagnonDYNAMIC-INFO.COM)
Date: Sun Sep 24 2000 - 12:20:18 CDT

If this is the only machine that you have, this not needed but it's always
better as in the futur, you might add another box and forget to change the
rule.

-----Original Message-----
From: Kiss [mailto:NIKEBOYRETEMAIL.ES]
Sent: Saturday, September 23, 2000 6:53 AM
To: FOCUS-LINUXSECURITYFOCUS.COM
Subject: ipchains in a single machine

i have just one machine connected to the internet using ppp and ipchains
installed. i would like to know if, from a security standpoint, it's
neccesary
to specify as source ip my ip in the output chain, and as destination ip my
ip
in the input chain. for example,

        ipchains -A input -p TCP -s 0.0.0.0/0 -d $my_ip -j ACCEPT

        or if this should be ok:

        ipchains -A input -p TCP -s 0.0.0.0/0 -j ACCEPT